CVSS: 9.8EPSS: 7%CPEs: 12EXPL: 0CVE-2005-2702
https://notcve.org/view.php?id=CVE-2005-2702
23 Sep 2005 — Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt •
CVSS: 9.1EPSS: 4%CPEs: 12EXPL: 0CVE-2005-2703
https://notcve.org/view.php?id=CVE-2005-2703
23 Sep 2005 — Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 2%CPEs: 12EXPL: 0CVE-2005-2704
https://notcve.org/view.php?id=CVE-2005-2704
23 Sep 2005 — Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt •
CVSS: 9.8EPSS: 7%CPEs: 12EXPL: 0CVE-2005-2705
https://notcve.org/view.php?id=CVE-2005-2705
23 Sep 2005 — Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt •
CVSS: 9.1EPSS: 3%CPEs: 12EXPL: 0CVE-2005-2706
https://notcve.org/view.php?id=CVE-2005-2706
23 Sep 2005 — Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt •
CVSS: 5.0EPSS: 1%CPEs: 12EXPL: 0CVE-2005-2707
https://notcve.org/view.php?id=CVE-2005-2707
23 Sep 2005 — Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt •
CVSS: 9.1EPSS: 3%CPEs: 38EXPL: 0CVE-2005-2260
https://notcve.org/view.php?id=CVE-2005-2260
13 Jul 2005 — The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user. • http://bugzilla.mozilla.org/show_bug.cgi?id=289940 •
CVSS: 9.1EPSS: 4%CPEs: 55EXPL: 2CVE-2005-2261
https://notcve.org/view.php?id=CVE-2005-2261
13 Jul 2005 — Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection. • http://secunia.com/advisories/16043 •
CVSS: 9.8EPSS: 4%CPEs: 38EXPL: 1CVE-2005-2263
https://notcve.org/view.php?id=CVE-2005-2263
13 Jul 2005 — The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation. • http://secunia.com/advisories/16043 •
CVSS: 9.8EPSS: 82%CPEs: 38EXPL: 3CVE-2005-2265 – Mozilla Suite/Firefox - InstallVersion->compareTo() Code Execution
https://notcve.org/view.php?id=CVE-2005-2265
13 Jul 2005 — Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string. • https://www.exploit-db.com/exploits/16306 •